On Sun, 2017-12-10 at 10:06 -0500, Paul R. Tagliamonte wrote: > Thanks for the quick reply! > > Good call, but no such luck -- > > $ sudo keyctl show %keyring:.ima > Can't find 'keyring:.ima' Both dracut and systemd have examples for loading keys on the IMA keyring. - https://git.kernel.org/pub/scm/boot/dracut/dracut.git/tree/modules.d/98integrity/ima-keys-load.sh - https://github.com/systemd/systemd/blob/master/src/core/ima-setup.c Also, you might be interested in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850339 Mimi